Lock It Every Time
The same principle applies to anyone who walks away from their machine without locking it up. It's way too easy for someone to walk up and have instant access, and in some cases the ability to grant themselves elevated access (and audit logs aren't any help to track this one down).
I have found that showing users that they can quickly lock the machine using the windows key + 'L' shortcut.